More on PEAR::SOAP and SSL
| From: | (Jonathan Schilling) | Date: | Tue, 25 Feb 2003 22:53:00 +0000 |
| Subject: | More on PEAR::SOAP and SSL | ||
| Groups: | php.soap | ||
| Request: | Send a blank email to php-soap+get-439@lists.php.net to get a copy of this message | ||
Like some previous people on this list, I've tried to run a
PEAR::SOAP web service over SSL, where PEAR::SOAP is used for
both the client and the service. I always get this error
from my client code (with tracing):
OUTGOING:
[...]
INCOMING
Error! soap_fault Object
(
[error_message_prefix] =>
[mode] => 1
[level] => 1024
[code] => Parser
[message] => couldn't build response
[userinfo] =>
[callback] =>
)
which is the failure others have gotten as well.
I tried the suggestion of Peter Clarke and modified HTTP.php
to turn off the CURLOPT_SSL_VERIFY{HOST,PEER} settings, so
that certificates wouldn't be checked, but that didn't change
anything. But in any case, it's the certificates I'm trying
to get to work....
I set up a self-signed certificate, and the Apache server side
certificate seems to be ok (it gets processed ok by browser
access on a web page).
However, it isn't clear to me how the client side certificate
is supposed to work for web services. How does the client PHP
code know where it is? Is there some API call or property or
environment variable or something that needs to be set in order
to tell the client PHP SOAP library where the
certificate/keystore/whatever is?
Does anyone have an end-to-end example which shows how SSL- and
certificate-based PEAR::SOAP is supposed to work?
Thanks very much ...
Jonathan Schilling The SCO Group jls@sco.com